Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: erofs: The issue of generating a order = MAXORDER warning due to an improperly crafted negative isize has been fixed. As reported by syzbot 1, the root cause is that the isize field is a signed type, and a negative isize value is...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: erofs: Stop parsing non-compact HEAD indexes if clusterofs is invalid Syzbot generated a crafted image with a non-compact HEAD index of clusterofs 33024. Valid numbers should be between 0 and lclustersize-1, which causes the...

CVE-2026-89602

In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing zerofsgbufnrpages is advanced only after every global buffer has been grown. If a resize fails after some buffers were enlarged, a retry revisits those enlarged buffers...

Linux Distros Unpatched Vulnerability : CVE-2026-89602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: skip sufficiently large global buffers when resizing zerofsgbufnrpages is advanced only after every global buffer has been grown. If a resize fails after...

CVE-2026-89602

A flaw was found in the erofs Enhanced Read-Only File System component of the Linux kernel. This vulnerability occurs when resizing global buffers, specifically if a resize operation fails after some buffers have already been enlarged. A subsequent retry can lead to memory corruption by attemptin...

CVE-2026-89602

In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing zerofsgbufnrpages is advanced only after every global buffer has been grown. If a resize fails after some buffers were enlarged, a retry revisits those enlarged buffers...

DEBIAN-CVE-2026-89602

In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing zerofsgbufnrpages is advanced only after every global buffer has been grown. If a resize fails after some buffers were enlarged, a retry revisits those enlarged buffers...

CVE-2026-89602

CVE-2026-89602 affects the erofs (Enhanced Read-Only File System) component of the Linux kernel . When resizing global buffers, a failed partial resize leaves a retry path that either returns a spurious -ENOMEM (same-size retry) or allocates a temporary pointer array too small for the existing po...

CVE-2026-89602

In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing zerofsgbufnrpages is advanced only after every global buffer has been grown. If a resize fails after some buffers were enlarged, a retry revisits those enlarged buffers...

EUVD-2026-76514

In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing zerofsgbufnrpages is advanced only after every global buffer has been grown. If a resize fails after some buffers were enlarged, a retry revisits those enlarged buffers...

CVE-2026-89602 erofs: skip sufficiently large global buffers when resizing

In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing zerofsgbufnrpages is advanced only after every global buffer has been grown. If a resize fails after some buffers were enlarged, a retry revisits those enlarged buffers...

CVE-2026-89602 erofs: skip sufficiently large global buffers when resizing

In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing zerofsgbufnrpages is advanced only after every global buffer has been grown. If a resize fails after some buffers were enlarged, a retry revisits those enlarged buffers...

PT-2026-90318

In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing z erofs gbuf nrpages is advanced only after every global buffer has been grown. If a resize fails after some buffers were enlarged, a retry revisits those enlarged...

CVE-2026-80899

In the Linux kernel, the following vulnerability has been resolved: erofs: remove fscache backend entirely EROFS over fscache was introduced to provide image lazy pulling functionality. After the feature landed, the fscache subsystem made netfs a new hard dependency, which is unexpected for a loc...

AZL-99582 CVE-2026-80899 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: erofs: remove fscache backend entirely EROFS over fscache was introduced to provide image lazy pulling functionality. After the feature landed, the fscache subsystem made netfs a new hard dependency, which is unexpected for a loc...

AZL-99555 CVE-2026-80892 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: erofs: cap LZMA stream pool size fs/erofs/decompressorlzma.c sizes the module-global MicroLZMA stream pool from numpossiblecpus when the lzmastreams module parameter is unset, then zerofsloadlzmaconfig preallocates one...

CVE-2026-80899 erofs: remove fscache backend entirely

In the Linux kernel, the following vulnerability has been resolved: erofs: remove fscache backend entirely EROFS over fscache was introduced to provide image lazy pulling functionality. After the feature landed, the fscache subsystem made netfs a new hard dependency, which is unexpected for a loc...

EUVD-2026-71649

In the Linux kernel, the following vulnerability has been resolved: erofs: remove fscache backend entirely EROFS over fscache was introduced to provide image lazy pulling functionality. After the feature landed, the fscache subsystem made netfs a new hard dependency, which is unexpected for a loc...

CVE-2026-80899

CVE-2026-80899 affects the Linux kernel's EROFS filesystem fscache backend . The fscache subsystem introduced a hard dependency on netfs for a local filesystem and imposed a kernel-defined caching hierarchy considered inflexible compared to fanotify pre-content hooks. The feature had been depreca...

CVE-2026-80899

In the Linux kernel, the following vulnerability has been resolved: erofs: remove fscache backend entirely EROFS over fscache was introduced to provide image lazy pulling functionality. After the feature landed, the fscache subsystem made netfs a new hard dependency, which is unexpected for a loc...